Secunia

A vulnerability has been reported in Symantec Ghost Solution Suite, which can be exploited by malicious people to compromise a vulnerable system.

The problem is that the network connections between the Ghost Console and the Ghost Management Agent are not authenticated. This can be exploited to execute arbitrary commands with SYSTEM privileges on a client by conducting e.g. ARP spoofing attacks to impersonate the Symantec Ghost Solution Suite server.

The vulnerability is reported in versions 1.1, 2.0.0, and 2.0.1. Users that do not use Ghost Console or the Ghost Management Agent are reportedly not affected.

Solution
Apply updates (1.1 patch 2 or 2.0.2).
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Nicolas Pouvesle, Tenable Security.

Original Advisory
SYM08-003:
http://securityresponse.symantec.com/avcenter/security/Content/2008.02.07.html

Deep Links
Links available in Customer Area